Description
Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a long rtsp:// URI.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
Apple QuickTime 7.1.3 RTSP URI Buffer Overflow
exploit/windows/browser/apple_quicktime_rtsp
Exploit-DB 3
- Apple QuickTime 7.1.3 - RTSP URI Buffer Overflow (Metasploit) EDB-16527 · remote · May 4, 2010 · verified
- Apple QuickTime (Windows 2000) - 'rtsp URL Handler' Remote Buffer Overflow EDB-3072 · remote · Jan 3, 2007 · verified
- Apple QuickTime - 'rtsp URL Handler' Remote Stack Buffer Overflow EDB-3064 · remote · Jan 1, 2007 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- VU#442497 third-party-advisory
- APPLE-SA-2007-01-23 vendor-advisory
- http://isc.sans.org/diary.html?storyid=2094
- 31023 vdb-entry
- TA07-005A third-party-advisory
- http://secunia.com/blog/7/
- quicktime-rtsp-url-bo(31203) vdb-entry
- 23540 third-party-advisory
- 21829 vdb-entry
- 3064 exploit
- http://docs.info.apple.com/article.html?artnum=304989
- http://projects.info-pull.com/moab/MOAB-01-01-2007.html
- ADV-2007-0001 vdb-entry
- http://landonf.bikemonkey.org/code/macosx/MOAB_Day_1.20070102060815.15950.zadder.local.html
- 1017461 vdb-entry